Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4 Source: OracleOraHome92Agent

Level
Description
Agent process exited abnormally during initialization.
Comments
 
In one case, this Event ID appeared on Windows 2003 SP1 each time it was restarted. This was a computer with Oracle 9.2 installed that had been built from an image that was taken from another system and renamed using SYSPREP.

In another case, this Event ID appeared on Windows 2003 SP1 each time it was restarted. This was a computer with Oracle 9.2 installed, that had been built from an image that was taken from another system and renamed from "My Computer" Properties. SYSPREP was not run in order to keep the same SID.

I tried changing the computer name in the Oracle ".ora" files and Windows Registry but this did not fix it. This was resolved by rebuilding Windows on the computer and then installing Oracle.

In another case this Event ID appeared on a Windows 2003 SP1 computer with Oracle 9.2 installed. It had been working normally for a couple of weeks and then this Event ID appeared while it had been up and running for some time. Oracle had not been shut down properly before the last restart of Windows. This was resolved by shutting down Oracle properly and restarting Windows.
Remove the *.q archives on the Oracle Agent Directory and restart the service. This error occurs because the server was renamed.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...